Terminal Services Idle Timeout Problems

Posted on 2009-12-21
Last Modified: 2013-11-21
We have multiple Windows 2003 terminal servers. We have configured group policy to end active but idle sessions after 1 hour. What is happening though is that users are kicked off the terminal server after about 5-10 idle minutes. They get no pop-up warning that their session will end, it just logs them off. They have to log back on and restart any programs that were open. I have checked the individual terminal services configuration and the Sessions tab for each user. There are no settings that would impose a shorter idle timeout. We're also getting no messages in the event log that corresponds to this. Any ideas?
Question by:leatherleaf
    LVL 31

    Expert Comment

    by:Henrik Johansson
    Another GPO is propably overriding the configured setting with another value.
    Use RSOP.msc to check where the effective policy setting is applied from.
    Normally GPOs linked closer to object will take precedence of GPO linked to higher level in the structure when policy settings conflicts, but this can be overruled when configuring a GPO to be Enforced to deny any other GPO to override when settings conflicts. Right-click the GPO-link in GPMC to see if it has the Enforced flag set.

    Author Comment

    The GPO with the idle session timeout settings has the 'no override' checked.
    LVL 31

    Expert Comment

    by:Henrik Johansson
    It will give the effect that it will not let GPO linked closer to object than the the GPO override when policy settings are in conflict. Depending on version of OS/GPMC, it will be labeled 'no override' as its own flag or merged into enforced.
    Run RSOP.msc to find the effective policy setting and what GPO is configuring this. If that GPO-link has 'no override' enabled, the option flag nead to be cleared to let the new GPO take effect when linked closer to computer object.

    Accepted Solution

    ended up calling Microsoft on this one. Had to enable the group policy to extend the limit of active sessions to 1 hour and now everything is working.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Are end users causing IT problems again?

    You’ve taken the time to design and update all your end user’s email signatures, only to find out they’re messing up the HTML, changing the font and ruining the imagery. What can you do to prevent this? Find out how you can save your signatures from end users today.

    Have you considered what group policies are backwards and forwards compatible? Windows Active Directory servers and clients use group policy templates to deploy sets of policies within your domain. But, there is a catch to deploying policies. The…
    Mapping Drives using Group policy preferences Are you still using old scripts to map your network drives if so this article will show you how to get away for old scripts and move toward Group Policy Preference for mapping them. First things f…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    23 Experts available now in Live!

    Get 1:1 Help Now